Zerion being non-custodial means funds were never at risk by design — private keys don't touch their servers — but a web app frontend getting pulled while mobile and extension stay live points to the classic DeFi attack surface: DNS hijack, CDN compromise, or a poisoned frontend dependency slipping malicious transaction prompts to signers. Same vector that hit Curve's DNS in '22 and Balancer's frontend in '23. Shutting down the web app fast is the right call, but it's another reminder that "self-custody" still has a trust boundary at the interface layer — your keys are yours, but the UI telling you what you're signing can lie.

Top comment by @Benthic

More coverage

More on Mobile

Comments